Download Security Target - Common Criteria

Transcript
bizhub C754 / bizhub C654 / ineo+ 754 / ineo+ 654 Control Software
A2X00Y0-0100-G00-53
Security Target
---- [ Contents ] --------------------------------------------------------------------------------1.
ST Introduction ................................................................
................................................................................................
..................................................................................
..................................................6
.................. 6
1.1. ST Reference................................................................................................................................... 6
1.2. TOE Reference ............................................................................................................................... 6
1.3. TOE Overview ................................................................................................................................ 6
1.3.1. TOE Type ......................................................................................................................................................... 6
1.3.2. Usage of TOE and Main Security Functions ................................................................................................. 6
1.4. TOE Description............................................................................................................................. 7
1.4.1. Roles of TOE Users ......................................................................................................................................... 7
1.4.2. Physical Scope of TOE .................................................................................................................................... 8
1.4.3. Logical Scope of TOE .................................................................................................................................... 11
2.
Conformance Claims................................
Claims ................................................................
................................................................................................
.........................................................................
......................................... 18
2.1. CC Conformance Claim ............................................................................................................... 18
2.2. PP Claim ....................................................................................................................................... 18
2.3. Package Claim.............................................................................................................................. 18
2.4. Reference ...................................................................................................................................... 18
3. Security Problem Definition ................................................................
.............................................................................................
............................................................. 19
3.1. Protected Assets ........................................................................................................................... 19
3.2. Assumptions ................................................................................................................................. 20
3.3. Threats.......................................................................................................................................... 20
3.4. Organizational Security Policies ................................................................................................ 22
4. Security Objectives ................................................................
................................................................................................
...........................................................................
........................................... 23
4.1. Security Objectives for the TOE ................................................................................................. 23
4.2. Security Objectives for the Operational Environment ............................................................. 25
4.3. Security Objectives Rationale ..................................................................................................... 27
4.3.1. Necessity........................................................................................................................................................ 27
4.3.2. Sufficiency of Assumptions ........................................................................................................................... 28
4.3.3. Sufficiency of Threats ................................................................................................................................... 28
4.3.4. Sufficiency of Organizational Security Policies ........................................................................................... 32
5.
Extended Components Definition ................................................................
.....................................................................................
..................................................... 33
5.1. Extended Function Component .................................................................................................. 33
5.1.1. FIT_CAP.1 Definition.................................................................................................................................... 34
6.
IT Security Requirements................................
Requirements................................................................
................................................................................................
.................................................................
................................. 35
6.1. TOE Security Requirements ....................................................................................................... 35
6.1.1. TOE Security Functional Requirements...................................................................................................... 35
6.1.2. TOE Security Assurance Requirements....................................................................................................... 66
6.2. IT Security Requirements Rationale.......................................................................................... 67
6.2.1. Rationale for IT Security Functional Requirements ................................................................................... 67
6.2.2. Rationale for IT Security Assurance Requirements .................................................................................... 87
7.
TOE Summary Specification ................................................................
............................................................................................
............................................................ 88
7.1. F.ADMIN (Administrator Function)........................................................................................... 88
7.1.1. Administrator Identification Authentication Function ............................................................................... 88
7.1.2. Auto Logout Function of Administrator Mode ............................................................................................. 89
7.1.3. Function Supported in Administrator Mode................................................................................................ 89
7.2. F.ADMIN-SNMP (SNMP Administrator Function) .................................................................. 99
7.2.1. Identification and Authentication Function by SNMP Password .............................................................. 99
Copyright(c) 2011-2012 KONICA MINOLTA BUSINESS TECHNOLOGIES, INC., All Rights Reserved.
3 / 114